
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd.cer
File: e328149d-d077-4e6a-93b2-829a96c70afd.cer (raw, json)
Hash identifier: YRW+kjHRpIkVPtfey3NjTeBTBTf+dyozNogF2XdK1QA=
Subject key identifier: 4D:69:28:3B:C6:E3:14:A3:B3:31:A2:8D:F8:D2:91:66:1F:1D:75:6F
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584E07BAA7427A142014B418CC00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/e328149d-d077-4e6a-93b2-829a96c70afd.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 01 Jun 2026 19:15:15 +0000
Certificate not after: Sat 26 Aug 2028 14:12:58 +0000
Subordinate resources: AS: 402587
IP: 23.158.164.0/24
IP: 2602:f3b7::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:07:ba:a7:42:7a:14:20:14:b4:18:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: Jun 1 19:15:15 2026 GMT
Not After : Aug 26 14:12:58 2028 GMT
Subject: CN=e328149d-d077-4e6a-93b2-829a96c70afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:6e:01:4b:3b:a5:2c:87:50:28:35:4a:fe:
3f:e3:cb:c1:f7:dd:3d:2e:58:89:08:46:b6:7e:08:
5f:9d:b2:e6:29:02:e4:3b:36:a1:07:94:c6:f1:50:
44:bf:2d:32:e5:65:3a:a0:e8:2b:13:54:3d:9d:c1:
1f:f0:8a:c3:0b:32:e1:45:ae:d8:f1:09:1f:5a:2c:
25:27:13:c5:96:f1:11:84:28:dc:73:be:59:98:32:
3c:53:2b:82:a7:9d:4b:8d:e2:dd:b6:80:7e:b8:bb:
6b:de:a5:cb:22:ec:dc:3d:91:bd:c3:ae:d9:be:b8:
c9:b7:7a:03:4a:94:d9:06:09:cd:e8:3c:2e:16:09:
a3:3c:70:a6:ec:eb:f2:bf:1b:91:6b:78:88:c0:f3:
61:76:dd:df:73:c5:e0:41:12:d0:8d:15:30:43:7f:
dc:89:c2:33:6c:9c:43:15:dc:0b:87:a9:98:40:e1:
b8:58:87:fb:1e:d6:de:2c:c2:e0:63:53:32:53:01:
a5:1e:c7:64:e2:77:34:76:5e:d2:ed:8f:b8:37:75:
38:83:a1:4f:5b:bb:7a:5f:c6:9f:6f:62:f5:92:95:
e7:17:09:d1:20:8d:d1:6a:ac:37:1f:74:fc:7f:c8:
64:09:5c:de:2b:e2:4e:b2:32:0f:cf:64:ce:8c:d3:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:69:28:3B:C6:E3:14:A3:B3:31:A2:8D:F8:D2:91:66:1F:1D:75:6F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/e328149d-d077-4e6a-93b2-829a96c70afd.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.164.0/24
IPv6:
2602:f3b7::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402587
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:53:27:97:1b:9c:38:7f:fe:0e:73:a8:cf:c9:b7:5a:2e:1c:
ea:37:20:c2:9a:f5:b5:55:82:c9:0b:75:ca:5c:70:fa:5f:a2:
b9:d2:33:5b:06:b4:6e:18:bd:66:59:f7:60:6d:17:ef:c9:d5:
60:12:e3:14:1a:bf:65:42:5d:1e:18:f8:3e:eb:4d:0c:01:fe:
85:86:f1:d4:3f:2b:8c:d5:fe:46:34:83:fc:8e:c9:c2:d1:b2:
a9:4d:fb:3b:01:b5:c5:75:2b:12:f1:50:2c:3d:97:53:bc:f8:
5c:c7:56:8c:2c:09:9c:15:30:e0:7d:7b:35:b2:f4:b7:74:ba:
01:5f:dd:95:df:ee:18:a3:0f:02:98:66:8c:2c:85:df:2c:e9:
ba:72:33:5d:81:9e:08:72:e8:c0:45:86:43:01:a5:86:46:99:
0a:be:a8:3a:81:4f:54:70:95:98:96:34:7b:53:79:f1:71:71:
f8:bc:57:f1:ee:d5:97:04:73:46:0f:b5:ec:5e:66:f3:11:84:
c5:4f:ac:d0:dc:45:5f:af:56:c1:a8:fa:b7:f3:ee:95:9e:49:
c1:f0:b7:e0:2b:3f:65:97:e8:75:d9:8d:b8:ea:8b:18:1d:ec:
8b:bd:26:53:3d:f6:1b:45:1d:aa:57:96:22:cc:ff:15:87:7e:
dd:16:28:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:10 2026 by rpki-client